How does the framework get all the fds that are used by the apps forwakeup events?

> userspace-suspend-blocker thread/process/process group. When IO comes in, the> suspend blocker is signalled which then unfreezes the cgroup of the frozen> untrusted task. SIGIO works on pipes, fifos, sockets, ttys, and ptys --> many of which are precisely the kinds of things that would connect [trusted> and untrusted] apps. Notably absent (last I checked): inotify fds, signalfd,> timerfd, eventfd, filesystem fds and likely more.>> Incidentally, this is just to show that it's not impossible to implement> "wakeups" for cgroup-frozen tasks in userspace.>> Cheers,> -Matt Helsley>